This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa File: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (raw, json) Hash identifier: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA= Subject key identifier: 7D:F6:2A:F8:BE:88:17:90:35:78:4B:7E:EA:49:97:7A:A8:8B:4C:48 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C891B8E84F55CFDA59C4482BA3F1 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211432 IP address blocks: 185.232.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c8:91:b8:e8:4f:55:cf:da:59:c4:48:2b:a3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df62af8be88179035784b7eea49977aa88b4c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:09:5d:63:bf:60:d2:d2:a0:74:54:02:5f: c6:5a:41:29:0e:9f:9e:90:37:4d:21:06:d1:a4:36: 27:af:37:27:66:e3:9c:d3:fb:50:bc:04:59:24:56: 23:da:91:dd:18:2f:88:01:ad:cf:5e:e2:5c:18:ae: 38:47:dc:1a:58:2b:13:ff:2a:1a:04:d7:7d:8c:ad: 71:4a:f3:21:e2:f2:36:f7:97:b2:17:d5:8d:7b:62: 86:8c:32:41:7a:0b:a8:4d:7a:58:c3:cf:08:c8:9f: 43:fe:3d:7e:ec:5e:d2:61:2b:ae:4c:d3:29:41:3a: ad:ed:b0:c5:0e:51:99:97:c6:b2:c6:ab:c9:86:94: b5:17:42:72:e1:69:54:cb:45:4a:f1:f5:5b:01:6d: 44:b5:dc:bd:3a:d9:93:c7:81:a6:f5:75:69:ae:24: d8:be:70:f0:57:f3:6c:c7:a8:a1:09:22:32:d9:2c: 42:a1:15:c9:5c:b6:eb:09:b4:e9:ab:c0:28:a3:06: cc:62:0f:6a:c9:2d:5e:59:46:48:a6:08:7e:63:c6: 19:aa:79:85:f4:b9:e7:8e:86:d4:57:2c:25:69:bc: 12:a0:f6:97:13:45:c2:9c:f7:96:5b:40:5c:13:45: e5:a7:72:33:3a:f4:f8:9b:f6:d1:18:94:ec:40:c2: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F6:2A:F8:BE:88:17:90:35:78:4B:7E:EA:49:97:7A:A8:8B:4C:48 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.167.0/24 Signature Algorithm: sha256WithRSAEncryption 04:1e:2c:0b:83:8a:43:af:c5:96:1f:c2:b5:5a:f3:83:e7:4b: ee:b7:90:12:06:8f:0d:a5:a8:49:86:25:50:d0:93:43:87:36: bf:54:bd:2b:2e:f6:8a:30:0d:58:42:99:65:97:df:54:ec:7d: 8a:31:dd:c7:9e:e7:b9:f2:c1:1a:d1:c8:9d:41:18:f5:85:fa: 85:90:f4:c9:f4:72:62:0c:12:6c:9c:27:57:b5:f2:cd:91:05: 9d:5d:b8:e0:4e:83:44:08:a2:8d:82:30:49:4b:9e:cd:9e:16: 3f:e5:a8:51:12:a2:c9:4c:ea:11:cc:fd:00:d0:be:81:44:38: 12:0e:ff:66:85:63:d0:10:51:ae:bc:2d:3d:cb:8e:a9:47:7e: a3:1a:47:29:5c:7c:95:f7:a9:8a:f5:70:29:6e:bf:8d:9c:33: c8:b3:0c:ff:20:98:23:a0:3c:c0:e5:9f:62:50:18:38:d3:10: 91:ce:b8:e1:96:a2:72:e3:49:df:b3:96:53:78:cb:f7:fa:f9: b3:11:8d:71:13:01:05:d9:c0:e8:1b:92:8b:ab:b9:a3:4e:ad: f8:fe:e4:55:2b:c7:c5:1f:c8:6c:61:9f:2d:0c:bf:7b:b6:bd: 78:90:6c:72:03:30:aa:91:42:fe:81:21:e5:8e:7c:87:a4:92: 2e:dc:df:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FciRuOhPVc/aWcRIK6PxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY2MmFmOGJlODgxNzkwMzU3ODRiN2VlYTQ5OTc3YWE4OGI0YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux0JXWO/YNLSoHRUAl/GWkEpDp+e kDdNIQbRpDYnrzcnZuOc0/tQvARZJFYj2pHdGC+IAa3PXuJcGK44R9waWCsT/yoa BNd9jK1xSvMh4vI295eyF9WNe2KGjDJBeguoTXpYw88IyJ9D/j1+7F7SYSuuTNMp QTqt7bDFDlGZl8ayxqvJhpS1F0Jy4WlUy0VK8fVbAW1Etdy9OtmTx4Gm9XVpriTY vnDwV/Nsx6ihCSIy2SxCoRXJXLbrCbTpq8AoowbMYg9qyS1eWUZIpgh+Y8YZqnmF 9LnnjobUVywlabwSoPaXE0XCnPeWW0BcE0Xlp3IzOvT4m/bRGJTsQMLiwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH32Kvi+iBeQNXhLfupJl3qoi0xIMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvZmZZcS1MNklGNUExZUV0LTZrbVhlcWlMVEVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueinMA0G CSqGSIb3DQEBCwUAA4IBAQAEHiwLg4pDr8WWH8K1WvOD50vut5ASBo8NpahJhiVQ 0JNDhza/VL0rLvaKMA1YQplll99U7H2KMd3Hnue58sEa0cidQRj1hfqFkPTJ9HJi DBJsnCdXtfLNkQWdXbjgToNECKKNgjBJS57NnhY/5ahREqLJTOoRzP0A0L6BRDgS Dv9mhWPQEFGuvC09y46pR36jGkcpXHyV96mK9XApbr+NnDPIswz/IJgjoDzA5Z9i UBg40xCRzrjhlqJy40nfs5ZTeMv3+vmzEY1xEwEF2cDoG5KLq7mjTq34/uRVK8fF H8hsYZ8tDL97tr14kGxyAzCqkUL+gSHljnyHpJIu3N8k -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:07 2026 by rpki-client